Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-11 · source-backed
arXiv 2608.09732 exploits the fact that every current skill scanner inspects skills individually. Decompose the malicious workflow into interdependent sub-payloads packaged as separately-plausible skills, connected through artifact passing and execution handoffs, and nothing is harmful in isolation. Their defense, ChainGuard, analyzes a candidate against already-installed skills and cuts attack success to 22.5% while passing 99.5% of benign workflows. Companion result from ElasticBack: a dormant rule in skill documentation plus a benign trigger phrase in the user query, neither malicious alone. Per-file skill review is structurally insufficient. The unit of review is the installed set.
Each link below shares sources, entities, or timing with this story.
Shared entity: ColluSkill / Same source / Shared topic / Tension
Both cover ColluSkill; cite the same source (arXiv 2608.09732); overlapping topics (against, attack, candidate, skill).
Shared entity: Their / Same source domain / Shared topic / Earlier coverage / Tension
Both cover Their; reported by the same outlet (arxiv.org); overlapping topics (against, attack, maliciou).
Both cover Their; reported by the same outlet (arxiv.org); overlapping topics (against, skill).
Shared entity: Their / Shared topic / Earlier coverage / Tension
Both cover Their; overlapping topics (against, attack, beat); earlier Their coverage from 2026-06-24.
Shared entity: Their / Same source domain / Shared topic / Earlier coverage
Both cover Their; reported by the same outlet (arxiv.org); overlapping topics (against, benign).
Both cover Their; reported by the same outlet (arxiv.org); overlapping topics (against, skill).
Shared entity: Their / Shared topic / Earlier coverage
Both cover Their; overlapping topics (against, maliciou, scanner, skill); earlier Their coverage from 2026-07-09.
Shared entity: Their / Same source domain / Earlier coverage / Tension
Both cover Their; reported by the same outlet (arxiv.org); earlier Their coverage from 2026-08-10.